Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Automated tools for detecting known vulnerabilities in systems and applications.

Kitploit recommended

Top tools

10 selected

nuclei

projectdiscovery/nuclei

30.4k17h 29m ago

zaproxy

zaproxy/zaproxy

15.6k18h 55m ago

openvas-scanner

greenbone/openvas-scanner

4.8k19h 55m ago

trivy

aquasecurity/trivy

37.4k21h 19m ago

vuls

future-architect/vuls

12.2k8h 6m ago

lynis

cisofy/lynis

16.1k1 month ago

prowler

prowler-cloud/prowler

14.3k14h 49m ago

ScoutSuite

nccgroup/scoutsuite

7.8k2 years ago

wapiti

wapiti-scanner/wapiti

1.9k24 days ago

#10

nikto

sullo/nikto

10.6k2 months ago

Newest Relevance Most popular Recently updated

3860 results

bleed

dominikto/bleed

bleed is a tool to test servers for the 'Heartbleed' vulnerability (CVE-2014-0160).

vulnerability-scannersexploitationweb-security+2

712 years ago

bash-fix-exploit

teedeedubya/bash-fix-exploit

Ansible role to check the CVE-2014-6271 vulnerability

vulnerability-scannersvulnerability-analysisscripting-automation+2

12 years ago

aws-suture

pblittle/aws-suture

OpenSSL Heartbleed (CVE-2014-0160) vulnerability scanner.

cloud-infrastructure-securityvulnerability-scannersscripting-automation+2

212 years ago

aws-log4j-mitigations

markuman/aws-log4j-mitigations

CVE-2021-44228 log4j mitigation using aws wafv2 with ansible

vulnerability-scannersscripting-automationconfiguration-auditing+3

4 years ago

CVE-2025-30208

xuemian168/cve-2025-30208

全网首发 CVE-2025-31125 CVE-2025-30208 CVE-2025-32395 Vite Scanner

reconnaissancevulnerability-scannersweb-vulnerability-scanners+3

481 year ago

React2Shell-Toolbox

moleft/react2shell-toolbox

GUI-based security testing toolkit for detecting and exploiting the React Server Actions prototype pollution vulnerability (CVE-2025-55182) with POC…

reconnaissancevulnerability-scannersexploitation+3

3610 months ago

libwebp-checker

murphysecurity/libwebp-checker

A tool for finding vulnerable libwebp(CVE-2023-4863)

static-analysisvulnerability-scannersvulnerability-analysis+2

213 years ago

Apache_Penetration_Tool

wangfly-me/apache_penetration_tool

CVE-2021-41773&CVE-2021-42013图形化漏洞检测利用工具

vulnerability-scannersexploitationweb-application-exploitation+3

143 years ago

CVE-2025-3248

xuemian168/cve-2025-3248

A vulnerability scanner for CVE-2025-3248 in Langflow applications. 用于扫描 Langflow 应用中 CVE-2025-3248 漏洞的工具。

reconnaissancevulnerability-scannersexploitation+3

101 year ago

Ashwesker-CVE-2025-52691

mohammadzarnian1357/ashwesker-cve-2025-52691

CVE-2025-52691

vulnerability-scannersvulnerability-analysisexploitation+3

10 months ago

apache-vulnerability-testing

mrmtwoj/apache-vulnerability-testing

Apache HTTP Server Vulnerability Testing Tool | PoC for CVE-2024-38472 , CVE-2024-39573 , CVE-2024-38477 , CVE-2024-38476 , CVE-2024-38475 ,…

vulnerability-scannersweb-vulnerability-scannersvulnerability-analysis+3

1342 years ago

Apache-Struts-CVE-2017-5638-RCE-Mass-Scanner

subc0ol/apache-struts-cve-2017-5638-rce-mass-scanner

Mass scanner for Apache Struts CVE-2017-5638 remote code execution vulnerability. Automates detection and exploitation of vulnerable Struts endpoints…

reconnaissancevulnerability-scannersexploitation+2

9 years ago

ReactNext2Shell

furkankayapinar/reactnext2shell

CVE-2025-55182 and CVE-2025-66478

vulnerability-scannerspayload-generationexploitation+5

110 months ago

apache_audit_cve-2026-23918

sibersan/apache_audit_cve-2026-23918

Python toolkit to audit Apache HTTP Server against CVE-2026-23918 (HTTP/2 double-free RCE) and 4 related CVEs. Passive scanner with ALPN verification…

defensive-toolsvulnerability-scannersconfiguration-auditing+3

5 months ago

apache__activemq_CVE-2019-0222_5-15-8

shoucheng3/apache__activemq_cve-2019-0222_5-15-8

Exploit for CVE-2019-0222 targeting Apache ActiveMQ 5.15.8, enabling remote code execution via crafted HTTP requests to the message broker's REST API.

vulnerability-scannersvulnerability-analysisexploitation+3

1 year ago

ansible-CVE-2024-3094

kaminaduck/ansible-cve-2024-3094

Ansible playbooks designed to check and remediate CVE-2024-3094 (XZ Backdoor)

vulnerability-scannersvulnerability-analysisconfiguration-auditing+4

42 years ago

Analysis-of-TomcatKiller---CVE-2025-31650-Exploit-Tool

sattarbug/analysis-of-tomcatkiller---cve-2025-31650-exploit-tool

Detects CVE-2025-31650 in Apache Tomcat servers with Shodan-based target discovery and CSV/JSON reporting for vulnerability assessment.